[clamav-users] error: 'os_generic' undeclared

2016-12-21 Thread crazy thinker
Hi  all,

i tried to build clamav source code with ndk tools for android platform
 and x86 cpu architecture



 please find below my build script info
*#!/bin/bash*
*export NDK=/home/crazythinker-admin/Android/Sdk/ndk-bundle*

*$NDK/build/tools/make-standalone-toolchain.sh --platform=android-9
--toolchain=x86-4.9  --install-dir=`pwd`/i686-linux-android --force*
*export TOOLCHAIN_PATH=`pwd`/i686-linux-android/bin*
*export TOOL=i686-linux-android*

*export NDK_TOOLCHAIN_BASENAME=${TOOLCHAIN_PATH}/${TOOL}*

*export CC=$NDK_TOOLCHAIN_BASENAME-gcc*
*export CXX=$NDK_TOOLCHAIN_BASENAME-g++*
*export LINK=${CXX}*
*export LD=$NDK_TOOLCHAIN_BASENAME-ld*
*export AR=$NDK_TOOLCHAIN_BASENAME-ar*
*export RANLIB=$NDK_TOOLCHAIN_BASENAME-ranlib*
*export STRIP=$NDK_TOOLCHAIN_BASENAME-strip*

*export ARCH_FLAGS="-march=i686 -msse3 -mstackrealign -mfpmath=sse"*
*export ARCH_LINK=*
*export CPPFLAGS=" ${ARCH_FLAGS} -fpic -ffunction-sections -funwind-tables
-fstack-protector -fno-strict-aliasing -finline-limit=64 "*
*export CXXFLAGS=" ${ARCH_FLAGS} -fpic -ffunction-sections -funwind-tables
-fstack-protector -fno-strict-aliasing -finline-limit=64 -frtti
-fexceptions "*
*export CFLAGS=" ${ARCH_FLAGS} -fpic -ffunction-sections -funwind-tables
-fstack-protector -fno-strict-aliasing -finline-limit=64 "*
*export LDFLAGS=" ${ARCH_LINK} "*


*#export
CC="$NDK/toolchains/-4.9/prebuilt/linux-i686-linux-android_64/bin/i686-linux-android-clang
 --sysroot=$SYSROOT"*
*#export
AR="$NDK/toolchains/-4.9/prebuilt/linux-i686-linux-android_64/bin/i686-linux-android-clang-ar
 --sysroot=$SYSROOT"*
*./configure --host=x86 --disable-shared --disable-pthreads
--with-openssl=/home/crazythinker-admin/Downloads/ClamAVNDK/OpenSSL/openssl-1.0.2

 --with-pcre=/home/crazythinker-admin/Downloads/ClamAVNDK/pcre2-10.22/PCREx86
 --with-zlib=/home/crazythinker-admin/Downloads/ClamAVNDK/zlib-1.2.8/ZLIBx86
--with-libncurses-prefix=/home/crazythinker-admin/Downloads/ClamAVNDK/ncurses-gittup/NCURSESx86
 --prefix=$(pwd)/ClamAVx86  --disable-llvm --disable-quikdtop
--disable-clamav  --disable-yara --disable-bzip2 --disable-unrar
--disable-fanotify
--with-libcurl=/home/crazythinker-admin/Downloads/ClamAVNDK/curl-7.51.0/CURLx86*
*make clean*

*make*
*make install*


my intention is i need to get clamav engine library for android plaatform
so i tried build it using cross compilation mechanisim but i got below
error.


*GEN  version.h*
*  CC   libclamav_la-version.lo*
*  CC   libclamav_la-mpool.lo*
*  CC   libclamav_la-filtering.lo*
*  CC   libclamav_la-fmap.lo*
*  CC   libclamav_la-perflogging.lo*
*  CC   libclamav_la-bytecode.lo*
*  CC   libclamav_la-bytecode_vm.lo*
*  CC   libclamav_la-cpio.lo*
*  CC   libclamav_la-macho.lo*
*  CC   libclamav_la-ishield.lo*
*  CC   libclamav_la-bytecode_api.lo*
*  CC   libclamav_la-bytecode_api_decl.lo*
*  CC   libclamav_la-cache.lo*
*  CC   libclamav_la-bytecode_detect.lo*
*bytecode_detect.c: In function 'cli_detect_environment':*
*bytecode_detect.c:243:24: error: 'os_generic' undeclared (first use in
this function)*
* env->os_category = os_generic;*
*^*
*bytecode_detect.c:243:24: note: each undeclared identifier is reported
only once for each function it appears in*
*make[4]: *** [libclamav_la-bytecode_detect.lo] Error 1*


*could you please help me to find root casue and resolve this error*

any help/suggestions would be appreciated


Thanks,
Crazy Thinker
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Kees Theunissen
On Wed, 21 Dec 2016, Mark Foley wrote:

>On Wed, 21 Dec 2016 17:34:05 Reindl Harald wrote:
>>
>> Am 21.12.2016 um 17:25 schrieb Mark Foley:
>> > I'm running clamdscan on Maildir folders as:
>> >
>> > clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \
>> >   --fdpass --allmatch --stdout /home/HPRS/user/Maildir/
>> >
>> > I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf 
>> > has:
>> >
>> > ScanOLE2 no
>> > OLE2BlockMacros no

Also specify different values for "LocalSocket", "PidFile" and "LogFile"
and start a second instance of the clamd daemon using this config file.

< ... >

>Thinking about what the "d" means doesn't help me solve my problem. clamdscan
>has an option --config-file. I would assume clamdscan would spawn another clamd
>with the new option file. Is this not the case? Will the currently running 
>clamd
>be used regardless of the --config-file parameter?

Clamdscan will connect to the socket specified in the config file and
hence to the right deamon process. The socket specification is probably the
only parameter from the config that is used by clamdscan.



Regards,

Kees Theunissen.

-- 
Kees Theunissen,  System and network manager,   Tel: +31 (0)40-3334724
Dutch Institute For Fundamental Energy Research (DIFFER)
e-mail address:   c.j.theunis...@differ.nl
postal address:   PO Box 6336, 5600 HH, Eindhoven, the Netherlands
visitors address: De Zaale 20, 5612 AJ, Eindhoven, the Netherlands

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Mark Foley
On Wed, 21 Dec 2016 17:34:05 Reindl Harald wrote:
>
> Am 21.12.2016 um 17:25 schrieb Mark Foley:
> > I'm running clamdscan on Maildir folders as:
> >
> > clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \
> >   --fdpass --allmatch --stdout /home/HPRS/user/Maildir/
> >
> > I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf 
> > has:
> >
> > ScanOLE2 no
> > OLE2BlockMacros no
> >
> > However, it still finds OLE2 macros:
> >
> > /home/HPRS/user/Maildir/.Deleted 
> > Items/cur/1448980384.M492273P32500.mail,S=751508,W=761365:2,S: 
> > Heuristics.OLE2.ContainsMacros FOUND
> >
> > Is this happening because there is alread a clamd running for mail queue
> > checking which has the above config settings set to "yes"?
> >
> > How can I get clamdscan to skip checking for these macros?
>
> "man clamdscan" and think about what the "d" means versus "clamscan"
>
> NAME
> clamdscan - scan files and directories for viruses using Clam AntiVirus 
> Daemon

I believe I know what the "d" means. I've recently posted here with the subject
"No notice of OLE2.ContainsMacros" and got excellent information from you, in
fact.

Thinking about what the "d" means doesn't help me solve my problem. clamdscan
has an option --config-file. I would assume clamdscan would spawn another clamd
with the new option file. Is this not the case? Will the currently running clamd
be used regardless of the --config-file parameter?

--Mark
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] signature memory use

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Steve,

> Time: 86.344 sec (1 m 26 s)

That's why we should use clamdscan instead of clamscan. Clamscan reload all 
databases each time, this takes too much time.

Btw, what was the CPU for this test ?

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Reindl Harald



Am 21.12.2016 um 17:25 schrieb Mark Foley:

I'm running clamdscan on Maildir folders as:

clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \
  --fdpass --allmatch --stdout /home/HPRS/user/Maildir/

I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf has:

ScanOLE2 no
OLE2BlockMacros no

However, it still finds OLE2 macros:

/home/HPRS/user/Maildir/.Deleted 
Items/cur/1448980384.M492273P32500.mail,S=751508,W=761365:2,S: 
Heuristics.OLE2.ContainsMacros FOUND

Is this happening because there is alread a clamd running for mail queue
checking which has the above config settings set to "yes"?

How can I get clamdscan to skip checking for these macros?


"man clamdscan" and think about what the "d" means versus "clamscan"

NAME
clamdscan - scan files and directories for viruses using Clam AntiVirus 
Daemon

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Cannot skip OLE2 checking

2016-12-21 Thread Mark Foley
I'm running clamdscan on Maildir folders as:

clamdscan --config-file=/usr/local/etc/clamdscan.conf --multiscan \
  --fdpass --allmatch --stdout /home/HPRS/user/Maildir/

I want to skip checking for OLE2 macros. The /usr/local/etc/clamdscan.conf has:

ScanOLE2 no
OLE2BlockMacros no

However, it still finds OLE2 macros:

/home/HPRS/user/Maildir/.Deleted 
Items/cur/1448980384.M492273P32500.mail,S=751508,W=761365:2,S: 
Heuristics.OLE2.ContainsMacros FOUND

Is this happening because there is alread a clamd running for mail queue
checking which has the above config settings set to "yes"?

How can I get clamdscan to skip checking for these macros?

--Mark
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] signature memory use

2016-12-21 Thread Steve Basford

> So all signatures should be running fine with 6Gb of RAM, right ?
> Even our big signatures :)

Summary test:

Using clamscan only to scan test.eml (3,706 bytes)

ClamAV Official sigs only (daily/main):
pool memory used: 385.675 MB

Official + *all* Sanesecurity/Distributed sigs
pool memory used: 467.359 MB
Time: 39.500 sec (0 m 39 s)

Official + *all* Sanesecurity/Distributed + SecuriteInfo sigs

Time: 86.344 sec (1 m 26 s)
pool memory used: 750.292 MB




-- 
Cheers,

Steve
Twitter: @sanesecurity

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] signature memory use

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Thank you for your report Steve.

> Official:

Missing main.cvd :/

> Hope that helps see where some of the memory may be going,
> sorry for not sorting... I'm under orders to go shopping ;)

So all signatures should be running fine with 6Gb of RAM, right ?
Even our big signatures :)

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Selçuk,

> in redhat El 6 version thereis no clamdscan command .

It is in the "clamd" package.

http://rpm.pbone.net/index.php3/stat/4/idpl/34508318/dir/redhat_el_6/com/clamd-0.99.2-1.el6.x86_64.rpm.html

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Reindl Harald



Am 21.12.2016 um 14:38 schrieb Selcuk Yazar:

Dear Arnaud

in redhat El 6 version thereis no clamdscan command


this is simply not true - clamav is from the EPEL repo and here you go

https://koji.fedoraproject.org/koji/buildinfo?buildID=772565

the package "clamd" contains /usr/bin/clamdscan und /usr/sbin/clamd 
which is used by clamdscan



when a new mail
arrived at postfix server, it calls amavisd and spamassasin then clamscan
running for emails.


that is a really crazy and horrible setup because it means you fire for 
each new message a full clamscan process with all it's init and memory 
overhead - the never can scale - OK that it should not take some minutes 
is a different story but virtually nobody has a mailserver not using 
clamd be it with clamdscan or a milter connecting to clamd



 can it (slow scan) be depend to internet connection ??


no


normally we are managing 60K users with clam with no problem but this
morning we have. i think it causes database files

On Wed, Dec 21, 2016 at 4:28 PM, Arnaud Jacques / SecuriteInfo.com <
webmas...@securiteinfo.com> wrote:


Hello Selçuk,


when i try to run clamscan for single file on tmp folder it takes 12
minutes !!!


Please use clamdscan.
How many time it takes to scan the same file ?

--
Best regards,

Arnaud Jacques
SecuriteInfo.com

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] signature memory use

2016-12-21 Thread Steve Basford
As some people have reported memory issues...

Quickly put these together based on scanning a small file
and *only* loading *one* signature database at a time:

Sanesecurity:

badmacro.ndb,pool memory used: 5.132 MB
blurl.ndb,pool memory used: 4.800 MB
bofhland_cracked_URL.ndb,pool memory used: 4.370 MB
bofhland_malware_attach.hdb,pool memory used: 4.519 MB
bofhland_malware_URL.ndb,pool memory used: 4.546 MB
bofhland_phishing_URL.ndb,pool memory used: 4.421 MB
crdfam.clamav.hdb,pool memory used: 4.355 MB
doppelstern-phishtank.ndb,pool memory used: 4.355 MB
doppelstern.hdb,pool memory used: 4.355 MB
doppelstern.ndb,pool memory used: 4.355 MB
foxhole_all.cdb,pool memory used: 4.366 MB
foxhole_all.ndb,pool memory used: 4.449 MB
foxhole_filename.cdb,pool memory used: 4.445 MB
foxhole_generic.cdb,pool memory used: 4.374 MB
foxhole_js.cdb,pool memory used: 4.355 MB
foxhole_js.ndb,pool memory used: 4.363 MB
junk.ndb,pool memory used: 21.616 MB
jurlbl.ndb,pool memory used: 5.519 MB
jurlbla.ndb,pool memory used: 5.714 MB
lott.ndb,pool memory used: 5.441 MB
phish.ndb,pool memory used: 18.101 MB
phishtank.ndb,pool memory used: 14.284 MB
porcupine.ndb,pool memory used: 7.136 MB
rogue.hdb,pool memory used: 4.359 MB
scam.ndb,pool memory used: 12.667 MB
scamnailer.ndb,pool memory used: 26.624 MB
shelter.ldb,pool memory used: 4.374 MB
spam.ldb,pool memory used: 4.382 MB
spamattach.hdb,pool memory used: 4.355 MB
spamimg.hdb,pool memory used: 4.359 MB
spear.ndb,pool memory used: 13.261 MB
spearl.ndb,pool memory used: 4.702 MB
winnow.attachments.hdb,pool memory used: 5.374 MB
winnow.complex.patterns.ldb,pool memory used: 4.363 MB
winnow_bad_cw.hdb,pool memory used: 4.355 MB
winnow_extended_malware.hdb,pool memory used: 4.499 MB
winnow_extended_malware_links.ndb,pool memory used: 4.355 MB
winnow_malware.hdb,pool memory used: 4.894 MB
winnow_malware_links.ndb,pool memory used: 9.808 MB
winnow_phish_complete.ndb,pool memory used: 5.316 MB
winnow_phish_complete_url.ndb,pool memory used: 5.316 MB
winnow_spam_complete.ndb,pool memory used: 5.159 MB


SecuriteInfo:

javascript.ndb,pool memory used: 29.484 MB
securiteinfo.hdb,pool memory used: 243.804 MB
securiteinfoascii.hdb,pool memory used: 15.726 MB
securiteinfohtml.hdb,pool memory used: 10.613 MB
spam_marketing.ndb,pool memory used: 5.675 MB

Official:

daily.hdb,pool memory used: 49.777 MB
daily.hsb,pool memory used: 58.074 MB
daily.ldb,pool memory used: 11.394 MB
daily.mdb,pool memory used: 11.656 MB
daily.mdu,pool memory used: 4.355 MB
daily.ndb,pool memory used: 5.273 MB
daily.ndu,pool memory used: 4.355 MB

Hope that helps see where some of the memory may be going,
sorry for not sorting... I'm under orders to go shopping ;)

-- 
Cheers,

Steve
Twitter: @sanesecurity

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Selcuk Yazar
Dear Arnaud

in redhat El 6 version thereis no clamdscan command . when a new mail
arrived at postfix server, it calls amavisd and spamassasin then clamscan
running for emails.

 can it (slow scan) be depend to internet connection ??

normally we are managing 60K users with clam with no problem but this
morning we have. i think it causes database files.

best regards

On Wed, Dec 21, 2016 at 4:28 PM, Arnaud Jacques / SecuriteInfo.com <
webmas...@securiteinfo.com> wrote:

> Hello Selçuk,
>
> > when i try to run clamscan for single file on tmp folder it takes 12
> > minutes !!!
>
> Please use clamdscan.
> How many time it takes to scan the same file ?
>
> --
> Best regards,
>
> Arnaud Jacques
> SecuriteInfo.com
>
> Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
> Twitter : @SecuriteInfoCom
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>



-- 
Selçuk YAZAR
http://www.selcukyazar.blogspot.com
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Hello Selçuk,

> when i try to run clamscan for single file on tmp folder it takes 12
> minutes !!!

Please use clamdscan.
How many time it takes to scan the same file ?

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] with main.cvd clamscan dead slow

2016-12-21 Thread Selcuk Yazar
Hi,

we have redhat EL 6 server (92GB RAM , 8Core CPU  )with postfix  and we use
clamav for viruses etc.

when i try to run clamscan for single file on tmp folder it takes 12
minutes !!!

after i move main.cvd (105MB) trash

it takes 4 seconds.


what it can be ?

thanks in advance

Selçuk YAZAR
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] clamd restart

2016-12-21 Thread Arnaud Jacques / SecuriteInfo.com
Hello,

> Javascript.ndb from Securiteinfo was causing major memory and scanning
> issues for some people.

Free version of javascript.ndb has 39861 lines
Pro version of javascript.ndb has 45511 lines.

This should be OK for 6Gb of RAM. Even 4Gb I think.

AFAIK, the problem occurs when javascript.ndb has more than 50k lines.

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamd restart

2016-12-21 Thread Steve basford




On 21 December 2016 11:07:42 Al Varnell  wrote:

Are you using any UNOFFICIAL signatures? Some of them have been causing 
memory issues recently for others.




Al, while some 3rd party sigs are using memory, you also got to remember the
Huge amount of sig only hashes the official sigs are adding recently in 
order to have better detection.


Javascript.ndb from Securiteinfo was causing major memory and scanning 
issues for some people.


A list of sig databases would be a starting point to diagnose issues.

I'm mobile at the moment but will check sig performance later.

Cheers,

Steve
Twitter: @sanesecurity


___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamd restart

2016-12-21 Thread Steve basford

Do you have a list of signatures in your clamav database folder you can list?

Cheers,

Steve
Twitter: @sanesecurity



On 21 December 2016 11:20:12 "Richard Walker - Seven Internet Ltd" 
 wrote:



Hi Al

Yes I'm using unofficial signatures. I have disabled the cron for updates.
How do I safety remove the UNOFFICIAL signatures?

Thanks

Rich

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf
Of Al Varnell
Sent: 21 December 2016 11:07
To: ClamAV users ML
Subject: Re: [clamav-users] clamd restart

Are you using any UNOFFICIAL signatures? Some of them have been causing
memory issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:


Hi

I am having to restart clamd twice a day now. I can't find anything in
the mail/clamd logs other than hundreds of entries like this
1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
unable to connect to UNIX socket (/var/run/clamav/clamd.sock):
Connection refused

On some forums its saying I'm running out of memory. The server it is
installed on is running 6GB and handles about 22000+ emails a day.

Clamscan -V is showing

ClamAV 0.99.2/22749/

Thanks

Rich



---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml



___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamd restart

2016-12-21 Thread Richard Walker - Seven Internet Ltd
Hi Al

Yes I'm using unofficial signatures. I have disabled the cron for updates.
How do I safety remove the UNOFFICIAL signatures?

Thanks

Rich

-Original Message-
From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf
Of Al Varnell
Sent: 21 December 2016 11:07
To: ClamAV users ML
Subject: Re: [clamav-users] clamd restart

Are you using any UNOFFICIAL signatures? Some of them have been causing
memory issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:
> 
> Hi
> 
> I am having to restart clamd twice a day now. I can't find anything in 
> the mail/clamd logs other than hundreds of entries like this
> 1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
> unable to connect to UNIX socket (/var/run/clamav/clamd.sock): 
> Connection refused
> 
> On some forums its saying I'm running out of memory. The server it is 
> installed on is running 6GB and handles about 22000+ emails a day.
> 
> Clamscan -V is showing
> 
> ClamAV 0.99.2/22749/
> 
> Thanks
> 
> Rich


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamd restart

2016-12-21 Thread Al Varnell
Are you using any UNOFFICIAL signatures? Some of them have been causing memory 
issues recently for others.

-Al-

On Wed, Dec 21, 2016 at 02:09 AM, Richard Walker - Seven Internet Ltd wrote:
> 
> Hi
> 
> I am having to restart clamd twice a day now. I can't find anything in the
> mail/clamd logs other than hundreds of entries like this 
> 1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
> unable to connect to UNIX socket (/var/run/clamav/clamd.sock): Connection
> refused
> 
> On some forums its saying I'm running out of memory. The server it is
> installed on is running 6GB and handles about 22000+ emails a day. 
> 
> Clamscan -V is showing 
> 
> ClamAV 0.99.2/22749/
> 
> Thanks
> 
> Rich


smime.p7s
Description: S/MIME cryptographic signature
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] clamd restart

2016-12-21 Thread Richard Walker - Seven Internet Ltd
Hi

I am having to restart clamd twice a day now. I can't find anything in the
mail/clamd logs other than hundreds of entries like this 
1cIzSP-8u-84 malware acl condition: clamd /var/run/clamav/clamd.sock :
unable to connect to UNIX socket (/var/run/clamav/clamd.sock): Connection
refused

On some forums its saying I'm running out of memory. The server it is
installed on is running 6GB and handles about 22000+ emails a day. 

Clamscan -V is showing 

ClamAV 0.99.2/22749/

Thanks

Rich


---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml